Phpmyadmin

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.2:*:*:*:*:*:*:*

part: a version: 2.10.0.2 update: *

VendorPhpmyadmin (a60852d8-fb42-5cb2-9d73-8590e820f745)
ProductPhpmyadmin (7cedec45-6907-5c63-9c4a-c7029e14bff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:composer/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.011920
pkg:docker/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.011921
pkg:github/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.011923
pkg:rpm/fedora/phpmyadmin purl2cpe 2026-06-01 10:12:58.011924
pkg:rpm/opensuse/phpmyadmin purl2cpe 2026-06-01 10:12:58.011926

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2284 vulnerable 2026-06-08 04:51:27.579961 Details available
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted SQL bookmark.
Published: 2009-07-01T12:26:00.000Z
Updated: 2024-08-07T05:44:55.899Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4326 vulnerable 2026-06-08 04:50:38.642082 Details available
The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a "</script" sequence.
Published: 2008-09-30T16:00:00.000Z
Updated: 2024-08-07T10:08:35.116Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4096 vulnerable 2026-06-08 04:50:37.779857 Details available
libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server_databases.php with a sort_by parameter containing PHP sequences, which are processed by create_function.
Published: 2008-09-17T18:06:00.000Z
Updated: 2024-08-07T10:00:42.597Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3457 vulnerable 2026-06-08 04:50:34.764524 Details available
Cross-site scripting (XSS) vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify config/config.inc.php.
Published: 2008-08-04T19:00:00.000Z
Updated: 2024-08-07T09:37:27.076Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3456 vulnerable 2026-06-08 04:50:34.763087 Details available
phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack.
Published: 2008-08-04T19:00:00.000Z
Updated: 2024-08-07T09:37:27.077Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3197 vulnerable 2026-06-08 04:50:33.428926 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2960 vulnerable 2026-06-08 04:50:32.727187 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1924 vulnerable 2026-06-08 04:50:22.313414 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6100 vulnerable 2026-06-08 04:50:07.759580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.